Security audit
招采文件萝卜坑识别专家（招标人版）Bid Carrot Pit Tenderer 1.0.0
Security checks across malware telemetry and agentic risk
Overview
This skill is a procurement-document compliance checker with disclosed, purpose-aligned local parsing scripts and no evidence of hidden data access, exfiltration, persistence, or destructive behavior.
Before installing, understand that this skill is meant to analyze procurement/tender documents and may process sensitive business documents locally. Use it on files you intend to review, verify legal citations against current official sources, and treat its output as compliance triage rather than legal advice.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.